This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
File:                     F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json)
Hash identifier:          seMmDr9bQeTRvY+K+feGostkmeeKOcDavDFb18DUXGY=
Subject key identifier:   79:69:B3:B1:E3:D2:8E:47:70:C6:64:45:57:67:D9:12:C5:D2:31:2D
Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84
Certificate issuer:       /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884
Certificate serial:       4FB0CE99C6C29AD731224E172D13B723D1ECF15F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
Manifest number:          01D9
Signing time:             Wed 17 Dec 2025 14:10:56 +0000
Manifest this update:     Wed 17 Dec 2025 14:05:56 +0000
Manifest next update:     Sat 20 Dec 2025 14:54:56 +0000
Files and hashes:         1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: VozSda3PUTVVwlbkV3tYuGZThB+x7g+I6dGGUcTdJvA=)
                          2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl
                          rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 14:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b0:ce:99:c6:c2:9a:d7:31:22:4e:17:2d:13:b7:23:d1:ec:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884
        Validity
            Not Before: Dec 17 14:05:56 2025 GMT
            Not After : Dec 20 14:54:56 2025 GMT
        Subject: CN=7969B3B1E3D28E4770C664455767D912C5D2312D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:97:5a:ec:9a:60:8c:4e:d5:4f:18:1c:39:
                    04:11:91:16:56:0d:95:ce:1c:29:ed:6a:d0:ba:e5:
                    fa:cd:08:9d:26:c2:ea:a7:84:95:96:dc:3c:ce:b5:
                    83:88:74:0b:49:82:d8:d9:84:21:63:53:cc:35:32:
                    b7:8a:d2:02:8c:a0:12:0d:7d:0e:99:9d:7c:b7:b6:
                    d7:98:21:cd:eb:a4:57:fa:e4:27:12:b9:f4:b6:70:
                    b7:11:37:ec:80:f3:56:8b:e4:4e:c5:b1:91:3f:e4:
                    56:b8:46:ac:f4:bf:1a:a8:72:6d:6c:9c:cd:61:d2:
                    c2:67:b9:7b:b2:9e:56:f7:f2:43:1b:d2:67:84:b2:
                    29:67:96:b1:33:21:17:cb:4b:8c:e9:2a:95:32:34:
                    f1:1d:ec:3d:90:21:21:44:09:1e:31:ad:40:e8:84:
                    da:b6:bd:d4:f4:fa:11:0c:88:65:c5:42:02:b2:16:
                    43:3b:8e:61:0b:a6:7b:de:29:2a:20:89:52:96:13:
                    e5:28:86:83:ce:fe:de:4e:38:90:2b:59:f3:8e:20:
                    d9:8d:b3:a5:26:88:28:f6:38:77:29:a6:12:81:a5:
                    c5:e7:5f:b4:df:64:c0:81:9e:59:41:99:5a:79:63:
                    f9:8d:5f:bb:74:26:87:a6:44:f2:26:2d:cd:5a:1c:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:B3:B1:E3:D2:8E:47:70:C6:64:45:57:67:D9:12:C5:D2:31:2D
            X509v3 Authority Key Identifier:
                keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:47:53:6c:2a:b1:ee:93:38:cf:8d:bd:83:e4:82:8a:4c:
         12:52:82:e7:d2:14:4f:b6:27:82:ed:a1:b7:2b:85:23:3d:ac:
         7c:d9:9e:c3:44:cd:13:0b:9d:44:5b:01:72:0a:62:7e:77:52:
         53:5e:d2:be:82:e5:99:3e:07:8d:55:76:46:df:13:50:6a:df:
         b0:fe:e5:da:c1:99:8c:fe:47:08:3e:40:2d:81:fc:94:5d:3b:
         48:19:26:97:c2:02:94:cd:01:1d:73:34:8d:8b:d0:d1:9a:d6:
         32:3f:6a:cd:17:7f:d6:b0:2c:ee:c8:0f:a7:32:08:28:d1:fe:
         a6:fe:d9:9b:86:32:ef:d7:0e:c2:ac:0b:37:5d:6b:75:e7:6c:
         9b:d1:0e:bc:a2:6c:1d:6c:fd:4d:3f:fd:a4:4b:15:79:4e:22:
         56:cf:69:51:c3:fe:b9:44:f7:a0:df:73:cd:c2:cb:75:71:5a:
         2c:3c:19:cb:97:b7:29:9d:bb:40:45:66:1c:9f:e4:a6:de:01:
         2a:21:b2:33:5e:b4:9e:cf:7e:87:b2:62:94:32:d5:01:b0:b7:
         d1:d9:77:af:bd:d9:97:6f:1e:36:21:2e:da:4d:42:fe:ce:df:
         ca:37:fe:75:d4:eb:e1:8b:af:f8:01:00:e8:71:34:fa:fa:d5:
         ff:71:a7:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUT7DOmcbCmtcxIk4XLRO3I9Hs8V8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz
OTFBQjg4NDAeFw0yNTEyMTcxNDA1NTZaFw0yNTEyMjAxNDU0NTZaMDMxMTAvBgNV
BAMTKDc5NjlCM0IxRTNEMjhFNDc3MEM2NjQ0NTU3NjdEOTEyQzVEMjMxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZFpda7JpgjE7VTxgcOQQRkRZW
DZXOHCntatC65frNCJ0mwuqnhJWW3DzOtYOIdAtJgtjZhCFjU8w1MreK0gKMoBIN
fQ6ZnXy3tteYIc3rpFf65CcSufS2cLcRN+yA81aL5E7FsZE/5Fa4Rqz0vxqocm1s
nM1h0sJnuXuynlb38kMb0meEsilnlrEzIRfLS4zpKpUyNPEd7D2QISFECR4xrUDo
hNq2vdT0+hEMiGXFQgKyFkM7jmELpnveKSogiVKWE+UohoPO/t5OOJArWfOOINmN
s6UmiCj2OHcpphKBpcXnX7TfZMCBnllBmVp5Y/mNX7t0JoemRPImLc1aHIxdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeWmzsePSjkdwxmRFV2fZEsXSMS0wHwYDVR0j
BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz
NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB
Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx
NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5
MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHHWR1NsKrHukzjPjb2D5IKKTBJSgufSFE+2
J4LtobcrhSM9rHzZnsNEzRMLnURbAXIKYn53UlNe0r6C5Zk+B41VdkbfE1Bq37D+
5drBmYz+Rwg+QC2B/JRdO0gZJpfCApTNAR1zNI2L0NGa1jI/as0Xf9awLO7ID6cy
CCjR/qb+2ZuGMu/XDsKsCzdda3XnbJvRDryibB1s/U0//aRLFXlOIlbPaVHD/rlE
96Dfc83Cy3VxWiw8GcuXtymdu0BFZhyf5KbeASohsjNetJ7PfoeyYpQy1QGwt9HZ
d6+92ZdvHjYhLtpNQv7O38o3/nXU6+GLr/gBAOhxNPr61f9xp3U=
-----END CERTIFICATE-----
Generated at Thu Dec 18 05:41:54 2025 by rpki-client